Privacy Policy

1. Introduction

Vinance Pty Ltd ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use Vinance Loan Assistant, our AI-powered loan assistance service.

Important: Vinance Loan Assistant is an AI-powered information service only. We provide educational information and connect you with licensed mortgage brokers. We do not provide financial advice, credit assistance, or arrange loans directly.

This policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Name (first name, last name)
• Email address (used as your login identifier)
• Phone number (optional)
• State (required for loan calculations)
• Authentication credentials (stored securely via enterprise-grade cloud authentication services)

2.2 Conversation Data

When you chat with our AI assistant, we collect:

• Your questions and messages
• AI responses and calculations provided
• Timestamp and metadata about each conversation
• Conversation history for continuity and service improvement

2.3 Usage Data

We automatically collect technical information:

• IP address and approximate location
• Browser type and operating system
• Pages viewed and features used
• Time and frequency of access
• Device identifiers

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: To operate, maintain, and improve our AI assistant
• AI Processing: To generate relevant responses using advanced AI language models
• Conversation Continuity: To remember context within conversations
• Connect with Brokers: To facilitate connections with licensed mortgage brokers when requested
• Analytics: To analyze usage patterns and improve our services
• Security: To detect, prevent, and address technical issues and fraud
• Compliance: To comply with legal obligations and industry regulations
• Essential Communication: To respond to your inquiries, send service updates, and account notifications

4. Data Sharing and Disclosure

We respect your privacy and limit sharing of your information:

• Never Sold: We do NOT sell your personal data to third parties
• Service Providers: We share data only with trusted service providers who assist our operations
• Your Consent: When you explicitly authorize us to share data (e.g., with a broker)
• Legal Requirements: When required by law or court order

4.1 Third-Party Services

Our platform integrates with the following third-party services:

• Cloud Infrastructure Provider: Secure cloud hosting, database storage, and authentication services
• AI Service Providers: Advanced language models for generating intelligent chat responses

These services have their own privacy policies and data handling practices. We ensure they provide appropriate safeguards for your data.

5. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication: Secure authentication via enterprise-grade cloud services with password hashing
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Regular security assessments and penetration testing
• Data Minimisation: We only collect data necessary to provide our service

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security against all threats.

6. Data Retention

We retain your personal data for the following periods:

• Active Accounts: Retained while your account is active
• After Deletion: Account and conversation data securely deleted within 30 days
• Analytics Data: Anonymized after 12 months
• Legal Requirements: Some data may be retained longer if required by law

7. Your Rights and Choices

Under Australian privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Objection: Object to processing of your data
• Portability: Receive your data in a structured format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at: privacy@vinance.com.au

We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for the service to function (authentication, session management)
• Analytics Cookies: Help us understand how users interact with our service
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences. Note that disabling cookies may affect the functionality of our Service.

9. Cross-Border Data Transfers

Your information may be transferred to and processed in countries other than Australia, including the United States (where our cloud infrastructure and AI service providers are located). We ensure that appropriate safeguards are in place to protect your data in accordance with Australian privacy laws.

10. Children's Privacy

Our Service is intended for users aged 18 years and older. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal data, please contact us immediately. We will take steps to delete such information.

11. California Residents (CCPA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to know if we sell personal information (we do not)
• Right to deletion of personal information
• Right to opt-out of the sale of personal information (not applicable as we don't sell data)

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Email notification (if you have an account)
• Notice on our website
• In-app notification

Your continued use of the Service after such changes constitutes acceptance of the updated policy.

13. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to you, we will:

• Notify you as soon as practicable
• Provide information about the breach
• Recommend steps you can take to protect yourself
• Comply with all mandatory notification requirements under Australian law

14. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact our Privacy Officer:

We will respond to all privacy inquiries within 30 days of receipt.